Egovernment

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-36531 Jun 10, 15:15 MEDIUM POC This Month

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection Nukeviet Egovernment

NVD

CVSS 3.1

5.7

EPSS

0.4%

CVE-2024-36528 Jun 10, 15:15 PHP HIGH POC This Week

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Deserialization Nukeviet Egovernment

NVD

CVSS 3.1

8.8

EPSS

0.8%

CVE-2024-36531

EPSS 0% CVSS 5.7

MEDIUM POC This Month

PHP RCE Code Injection +2

NVD

CVE-2024-36528 PHP

EPSS 1% CVSS 8.8

HIGH POC This Week

PHP RCE Deserialization +2

NVD